WO2006075892A1 - Method and device for consuming rights objects having inheritance structure - Google Patents
Method and device for consuming rights objects having inheritance structure Download PDFInfo
- Publication number
- WO2006075892A1 WO2006075892A1 PCT/KR2006/000147 KR2006000147W WO2006075892A1 WO 2006075892 A1 WO2006075892 A1 WO 2006075892A1 KR 2006000147 W KR2006000147 W KR 2006000147W WO 2006075892 A1 WO2006075892 A1 WO 2006075892A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- child
- parent
- slave device
- content object
- predetermined content
- Prior art date
Links
- 238000000034 method Methods 0.000 title claims abstract description 54
- 238000003860 storage Methods 0.000 claims abstract description 52
- 238000001514 detection method Methods 0.000 claims abstract description 25
- 238000007726 management method Methods 0.000 abstract 1
- 238000010586 diagram Methods 0.000 description 11
- 230000008569 process Effects 0.000 description 4
- 230000006870 function Effects 0.000 description 3
- 239000003795 chemical substances by application Substances 0.000 description 2
- 238000013478 data encryption standard Methods 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 230000009849 deactivation Effects 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000009826 distribution Methods 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 239000002674 ointment Substances 0.000 description 1
- 230000010076 replication Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
- G06Q20/3674—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2115—Third party
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2129—Authenticate client device independently of the user
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2135—Metering
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2137—Time limited access, e.g. to a computer or data
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2153—Using hardware token as a secondary aspect
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
Definitions
- Methods and apparatuses consistent with the present invention relate to digital rights management, and more particularly, to consuming a rights object (RO) having an inheritance structure in an environment where the RO is distributed over a plurality of devices.
- RO rights object
- DRM digital rights management
- DRM was introduced.
- any one is allowed to freely access encoded digital content, but a license referred to as an RO is needed to decode and execute the digital content.
- a device 10 obtains digital content from a content provider 20.
- Digital content provided by the content provider 20 is encrypted, and thus, in order to use the digital content, an RO corresponding to the digital content is needed.
- the device 10 can obtain the RO with a license to play the encrypted content from received from an RO issuer 30. To this end, a user should pay charges.
- the encrypted digital content is decrypted using a key contained in the RO.
- the RO issuer 30 makes the content provider 20 prepare an RO issuing detail report.
- the RO issuer 30 and the content provider 20 may be the same authority.
- the device 10 consumes the RO to use the encrypted digital content.
- the encrypted digital content can be freely copied and distributed to another device
- an RO contains constraint information such as Count, Interval or Copy, unlike the encrypted digital content, the RO has a limitation in its reuse or replication. Accordingly, the digital content can be more effectively protected by using DRM.
- Recent DRM techniques enable content object playback services to be provided to users on a subscription basis by playing back content objects using a plurality of ROs having an inheritance structure.
- a device generally needs two or more ROs that are in inheritance relationship to use an encrypted content object.
- a plurality of ROs needed for using a single encrypted content object may be stored in different devices. Therefore, it is necessary to develop methods to efficiently consume a plurality of ROs needed for using a single encrypted content object.
- the present invention provides a method and device for enabling a plurality of ROs distributed over a plurality of devices to be efficiently consumed.
- a master device including a storage module which stores a plurality of ROs having an inheritance structure, a detection module which searches the storage module for an RO needed for playing back a predetermined content object, a message generation module which, if the detection module fails to discover the RO needed for playing back the predetermined content object from the storage module, generates an RO request message, a device interface module which transmits the RO request message to a slave device and receives the RO needed for playing back the predetermined content object from the slave device, and a playback module which plays back the predetermined content object using at least one of the RO detected from the storage module and the RO received from the slave device.
- a method of consuming a plurality of ROs including obtaining a plurality of ROs having a predetermined inheritance structure from a slave device, and playing back a predetermined content object using the ROs.
- FIG. 1 is a diagram of a typical DRM system
- FIG. 2 is a diagram of a DRM system according to an exemplary embodiment of the present invention.
- FIG. 3 is a flowchart illustrating authentication between a master device and a slave device according to an exemplary embodiment of the present invention
- FIG. 4 is a flowchart illustrating a method of obtaining a child RO according to an exemplary embodiment of the present invention
- FIG. 5 is a flowchart illustrating a method of obtaining a parent RO according to an exemplary embodiment of the present invention
- FIG. 6 is a diagram of a parent RO according to an exemplary embodiment of the present invention.
- FIG. 7 is a diagram of a child RO according to an exemplary embodiment of the present invention.
- FIG. 8 is a block diagram of a master device according to an exemplary embodiment of the present invention.
- FIG. 9 is a block diagram of a slave device according to an exemplary embodiment of the present invention.
- FIG. 10 is a flowchart illustrating a method of consuming ROs having an inheritance structure according to an exemplary embodiment of the present invention
- FIG. 11 is a flowchart illustrating the providing of ROs by a slave device according to an exemplary embodiment of the present invention.
- a master device is a device which can be connected to a slave device and can play back a content object using a plurality of ROs having a reciprocal inheritance structure.
- the master device may be a portable content playback device such as a mobile phone, a personal digital assistant (PDA), or an MP3 player or a non-portable content playback device such as a desktop computer or a digital TV.
- PDA personal digital assistant
- MP3 player a non-portable content playback device such as a desktop computer or a digital TV.
- a slave device is a storage device including a non- volatile memory such as a flash memory to/from which data can be written/read, has predetermined data operation capabilities, and can be easily connected to/disconnected from a master device.
- the slave device may be a portable storage device such as a smart media card, a memory stick, a CF card, an XD card, or a multimedia card.
- the slave device may be a device other than those set forth herein or may be a device of a similar type to that of a master device.
- Content objects are encrypted digital content.
- digital content may be a moving picture, a still picture, audio data, a game, or text data.
- ROs are licenses for using content objects.
- ROs comprise at least one of a content encryption key, constraint information, and permission information.
- ROs are classified into parent ROs and child ROs.
- Parent ROs have an inheritance relationship with respective corresponding child ROs.
- Parent ROs comprise at least one of constraint information and permission information, while child ROs comprise content object identifiers and content encryption keys.
- child ROs instead of parent ROs, comprise constraint information, but the present invention is not restricted to it. Therefore, entire constraint information or part of the constraint information may be included in child ROs.
- the functions of constraint information included in child ROs can be fully understood by understanding the functions of constraint information included in parent ROs.
- Each parent ROs and its corresponding child ROs have the same inheritance relationship identifiers so that the inheritance relationships between the parent RO and the corresponding child ROs can be identified by the inheritance relationship identifiers.
- a single parent RO may have an inheritance relationship with a plurality of child ROs.
- a single child RO may have an inheritance relationship with a plurality of parent ROs.
- Content encryption keys are keys used for decrypting content objects and have predetermined binary values. Content encryption keys are included in child ROs, and child ROs comprise content object identifiers identifying content objects that can be decrypted using content encryption keys included in the child ROs.
- Permission information indicates play-back and reproduction types of a content object.
- Example of the play back include 'Play', 'Display', 'Execute', and 'Print'.
- the Play component indicates a right to express content in an audio/video format.
- the Display component indicates a right to display a content object through a visual device
- the Print component indicates a right to generate a hard copy of a content object.
- the content object is a moving picture or music
- at least one of the display component and print component may be set as permission information of an RO to be consumed to play the content object.
- the Execute component indicates a right to execute a content object such as games and other application programs.
- the Execute component may be set as permission information of an RO to be consumed to play the JAVA game.
- examples of the duplication include the Copy component and the
- the copy component and the move component are rights to move an RO from one device to another device and to store the same.
- the Move component deactivates the original RO in the current device, while the Copy component does not deactivate the original RO in the current device.
- deactivation may mean deletion of an RO.
- Constraint information refers to constraints allowing an RO to be played back and one or more pieces of constraint information may be set. Examples of the constraint information include Count constraint, Datetime constraint, Interval constraint, Accumulated constraint, and so on.
- the Count constraint specifies the count of permissions granted to a content object.
- the master device is allowed to play the content object 10 times until the count constraint for the RO is consumed.
- the Datetime constraint specifies duration for permission and selectively contains a start element or an end element.
- the master device can play a content object after and before a time/date specified by a start item of the datetime constraint. For example, when the start item is set to 00:00:00 (hour: minute: second) 2005-12-01 (year- month-day), the master device cannot access to and consume the RO for play the content object before 00:00:00 2005-12-08.
- the Interval constraint specifies a time interval at which an RO can be executed for the corresponding content object.
- a start element is contained in the Interval constraint
- consumption of the content object is permitted during a period of time specified by a duration element contained in the Interval constraint after a specified time/date. For example, let the interval constraint of be one week.
- the master device consumes an RO on and after 00:00:00 2005-12-01 to play a content object, consumption of the RO for playing the content object is permitted by 00:00:00 2005-12-08.
- the Accumulated constraint specifies a maximum time interval for an accumulated measured period of time while the RO is executed for the corresponding content object.
- the master device can play a content object for 10 hours. In this instance, the master device is not limited by the Count or Datetime.
- an encryption key consists of a pair of a public key and a private key.
- the public key is not necessary to be kept in secret, i.e., the public is easily accessible thereto while the private key must be known only to a specific device.
- This public key encryption algorithm has been disclosed to the general public but a third person cannot know or hardly know the original content with encryption algorithm, encryption key and ciphered text.
- public key encryption algorithm such as Diffie-Hellman, RSA, El Gamal, Elliptic Curve, etc.
- This is also referred to as secret key cryptography, wherein encryption is made when a key used to encrypt data and a key used to decrypt the data constitute the same encryption key.
- DES data encryption standard
- AES advanced encryption standard
- a random number is a sequence of numbers or characters with random properties.
- FIG. 2 is a diagram of a DRM system according to an exemplary embodiment of the present invention.
- the DRM system includes a master device 100 and a slave device 200.
- a user can obtain content objects from a content provider 20 via the master deice
- the user can purchase ROs needed for playing back content objects from an RO issuer 30.
- the purchased ROs may be stored in the master device 100 and then moved to/copied to the slave device 200.
- the slave device 200 may be equipped with one or more ROs when manufacturing the slave device 200.
- the master device 100 may play back content objects by being connected to the salve device 200 and consuming the ROs stored in the slave device 200.
- the master device 100 may use a plurality of ROs having an inheritance structure.
- the ROs having an inheritance structure may comprise at least one parent RO and at least one child RO.
- the present invention is not restricted to it.
- the master device 100 and the slave device 200 may authenticate each other before being connected to each other and exchanging data with each other.
- the authentication between the master device 100 and the slave device 200 is carried out for determining whether the master device 100 and the slave device 200 are legitimate and maintaining the security of data transmitted between the master device 100 and the slave device 200. This will now be described in detail with reference to FIG. 3.
- FIG. 3 is a flowchart illustrating an authentication procedure according to an exemplary embodiment of the present invention.
- a subscript 'M' of data indicates that the data is possessed or generated by a master device 100 and a subscript 'S' of data indicates that the data is possessed or generated by a slave device 200.
- the master device 100 sends an authentication request to the slave device 200.
- the master device 100 may send the slave device 200 a certificate M , which was issued to the master device 100 by J a certification authority.
- the certificate M is signed with a digital signature of the certification authority and contains a device ID and the public key .
- the slave device 200 verifies whether the certificate M of the master device 100 is valid using a certificate revocation list (CRL). If the certificate M is registered in the CRL, the slave device 200 may reject the authentication with the master device 100. If the certificate M is not registered in the CRL, the slave device 200 obtains the ⁇ public key - 7 M using b the certificate M of the master device 100.
- CRL certificate revocation list
- the slave device 200 If it is determined that the master device 100 is verified as an authenticated device, that is, the certificate M of the master device 100 is valid, in operation S 14, the slave device 200 generates a random number . In operation S 16, the generated random number is encrypted using the public key .
- the slave device 200 performs an authentication response procedure. During the authentication procedure, the slave device 200 sends a certificate , which was issued to the slave device 200 by the certification authority, and the encrypted random number .
- the certificate is signed with a digital signature of the certification authority and contains an ID and public key of the slave device 200.
- the master device 100 receives the certificate and encrypted random number and authenticates the slave device 200 by verifying the certificate , and decrypts the encrypted random number using its own private key .
- the master device 100 obtains the public key of the slave device 200 using the certificate of the slave device 200.
- verification of the certificate may also be performed on the slave device 200 using CRL.
- the master device 100 If the slave device 200 is verified as an authenticated device using the certificate of the slave device 200, in operation S24, the master device 100 generates a random number . In operation S26, the generated random number is encrypted using the public key of the slave device 200.
- the master device 100 requests the slave device 200 for an authentication end procedure in operation S30.
- the master device 100 sends the encrypted random number to the
- the slave device 200 receives the encrypted random number and
- M decrypts the random number using its private key .
- the master device 100 and the slave device 200 share each other's random numbers, that is, random number and random number .
- the master device 100 and the slave device 200 sharing each other's random numbers generate their session keys in operations S40 and S42.
- the same algorithm may be used. Therefore, the master device 100 and the slave device 200 share the same session key.
- encrypting and decrypting the data to be transmitted between the master device 100 and the slave device 200 using their session keys can further provide for ensured security in data transmission.
- the master device 100 and the slave device 200 encrypt and decrypt the data to be transmitted to each other using each session key generated by the authentication.
- the master device 100 may obtain one or more ROs having an inheritance structure from the slave device 200.
- the ROs having an inheritance structure may comprise a parent RO and a child RO.
- the master device 100 cannot play back a content object using only one of a parent RO and a child RO. In other words, the master device 100 needs both the parent RO and a child RO to play back a content object.
- the master device 100 can play back a content object identified by a content object identifier included in a child RO by using a content encryption key included in the child RO while referencing permission information and constraint information included in a parent RO.
- the master device 100 may obtain one of a parent RO and a child RO or both of the parent RO and the child RO from the slave device 200 depending on whether the slave device 200 includes only one or both of the parent RO and the child RO.
- the obtaining of a parent RO and a child RO from the slave device 200 by the master device 100 will now be described in detail with reference to FIGS. 4 and 5.
- FIG. 4 is a flowchart illustrating a method of obtaining a child RO according to an exemplary embodiment of the present invention.
- a master device 100 which wishes to play back a predetermined content object sends a request for a child RO to a slave device 200.
- the slave device transmits the requested child RO to the master device 100.
- the slave device may allow the master device 100 to access the requested child RO without directly transmitting the requested child RO to the master device 100.
- the master device 100 may transmit an identifier of the predetermined content object to the slave device 200 when sending the child RO request to the slave device 200.
- the slave device 200 detects for, i.e., searches for, the requested child RO using the identifier of the predetermined content object.
- FIG. 5 is a flowchart illustrating a method of obtaining a parent RO according to an exemplary embodiment of the present invention.
- a master device 100 which wishes to play back a predetermined content object sends a request for a parent RO to a slave device 200.
- the slave device transmits the requested parent RO to the master device 100.
- the slave device may allow the master device 100 to access the requested parent RO without directly transmitting the requested parent RO to the master device 100.
- the master device 100 may transmit an inheritance relationship identifier specifying an inheritance relationship in which the requested RO is involved to the slave device 200 when sending the parent RO request to the slave device 200. Then, the slave device 200 searches for the requested parent RO using the inheritance relationship identifier.
- the master device 100 may issue queries to the slave device 200 to obtain a child RO and a parent RO.
- the master device 100 may store one or both of a parent RO and a child RO needed for playing back a content object, in which case, the master device 100 performs one or both of the method illustrated in FIG. 4 and the method illustrated in FIG. 5.
- FIG. 6 is a diagram of a parent RO according to an exemplary embodiment of the present invention which is expressed in a mark-up language.
- the parent RO comprises permission information 620 and constraint information 630.
- a Play field 622 is set in the permission information 620, and the constraint information 630 comprises Datetime constraint information 632.
- FIG. 7 is a diagram of a child RO according to an exemplary embodiment of the present invention which is expressed in a mark-up language.
- the child RO comprises a content object identifier 730 and a content encryption key 720.
- the parent RO illustrated in FIG. 6 comprises an inheritance relationship identifier
- the child RO illustrated in FIG. 7 comprises an inheritance relationship identifier 710 (SubscriptionGUID). Since the inheritance relationship identifier 610 and the inheritance relationship identifier 710 are identical, it is determined that the parent RO illustrated in FIG. 6 and the child RO illustrated in FIG. 7 have an inheritance relationship with each other. If the master device 100 obtains both the parent RO illustrated in FIG. 6 and the child RO illustrated in FIG. 7 from the slave device 200, the master device 100 can play back a content object identified by the content object identifier 730 included in the child RO using the content encryption key 720 included in the child RO while referencing the permission information 620 and the constraint information 630 included in the parent RO.
- FIG. 8 is a block diagram of a master device 100 according to an exemplary embodiment of the present invention.
- the master device 100 comprises a device interface module 110, an encryption/decryption module 120, a storage module 130, a detection module 140, a message generation module 140, a playback module 160, a user input module 170, and a control module 180.
- the device interface module 110 transmits data to or receives data from a slave device 200.
- the master device 100 may be connected to the slave device 200 via the device interface module 110.
- the encryption/decryption module 120 performs encryption/decryption on data.
- the encryption/decryption module 120 encrypts data to be transmitted to the slave device 200 or decrypts data received from the slave device 200 upon the request of the control module 180.
- the encryption/decryption module 120 may be able to perform not only a public key-based encryption method but also a private key-based encryption method. For this, one or more encryption/decryption modules 120 may be included in the master device 100.
- the encryption/decryption module 120 may generate random numbers needed for performing authentication between the master device 100 and the slave device 200.
- the storage module 130 stores content objects, parent ROs, child ROs, a CRL, and a certificate of the master device 100.
- the storage module 130 may comprise a storage medium such as a hard disc or a flash memory.
- the detection module 140 searches the storage module 130 for a child RO and a parent RO needed for playing back a content object.
- the message generation module 150 generates a child RO request message and a parent RO request message.
- the child RO request message may comprise a content object identifier, and the parent RO request message may comprise an inheritance relationship identifier.
- the message generation module 150 may generate the child RO request message and the parent RO request message when the detection module 140 fails to discover a child RO and a parent RO needed for playing back a content object from the storage unit 130.
- the playback module 160 plays back a content object using a child RO and a parent RO.
- the playback module 160 may comprise a moving picture decoding module, in which case, the playback module 160 can play back a content object comprising MPEG-compressed moving picture data.
- the user input module 170 receives a command or request from a user.
- the user input module 170 may comprise an input unit such as a keypad, a touch pad, or a touch screen.
- the control module 180 controls the device interface module 110, the encryption/ decryption module 120, the storage module 130, the detection module 140, the message generation module 150, the playback module 160, and the user input module 170. Therefore, the control module 180 may serve as a DRM agent that generally manages a DRM operation performed by the master device 100. In addition, as described above with reference to FIG. 3, the control module 180 may control authentication between the master device 100 and the slave device 200 when the master device 100 is connected to the slave device 200.
- FIG. 9 is a block diagram of a slave device 200 according to an exemplary embodiment of the present invention.
- the slave device 200 comprises a device interface module 210, an encryption/decryption module 220, a storage module 230, a detection module 240, and a control module 250.
- the device interface module 210 transmits data to or receives data from a master device 100.
- the slave device 200 can be connected to the master device 100 via the device interface module 210.
- the encryption/decryption module 220 performs encryption/decryption on data.
- the encryption/decryption module 220 encrypts data to be transmitted to the master device 100 or decrypts data received from the master device 100 upon the request of the control module 250.
- the encryption/decryption module 220 may be able to perform not only a public key-based encryption method but also a private key-based encryption method. For this, one or more encryption/decryption modules 220 may be included in the slave device 200.
- the encryption/decryption module 220 may generate random numbers needed for performing authentication between the master device 100 and the slave device 200.
- the storage module 230 stores content objects, parent ROs, child ROs, a CRL, and a certificate of the slave device 200.
- the storage module 230 may comprise a storage medium such as a hard disc or a flash memory.
- the parent ROs and the child ROs stored in the storage module 230 may be moved from or copied from the master device 100 or may be those which were provided to the slave device 200 when the slave device 200 was manufactured.
- the detection module 240 searches the storage module 230 for a child RO or a parent RO when a child RO request message or a parent RO request message is received from the master device 100.
- the control module 250 controls the device interface module 210, the encryption/ decryption module 220, the storage module 230, and the detection module 240. Therefore, the control module 250 may serve as a DRM agent that generally manages a DRM operation performed by the slave device 200. In addition, as described above with reference to FIG. 3, the control module 250 may control authentication between the master device 100 and the slave device 200 when the slave device 200 is connected to the master device 100.
- a module means, but is not limited to, a software or hardware component, such as a Field Programmable Gate Array (FPGA) or Application Specific Integrated Circuit (ASIC), which performs certain tasks.
- a module may advantageously be configured to reside on the addressable storage medium and configured to execute on one or more processors.
- a module may include, by way of example, components, such as software components, object-oriented software components, class components and task components, processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables.
- the functionality provided for in the components and modules may be combined into fewer components and modules or further separated into additional components and modules.
- the components and modules may be implemented such that they execute one or more CPUs in a communication system.
- FIG. 10 is a flowchart illustrating a method of consuming ROs according to an exemplary embodiment of the present invention.
- the method is performed by a master device 100.
- the master device 100 receives a request for a content object from a user via a user input module 170.
- a detection module 140 searches a storage module 130 for a predetermined child RO containing a content encryption key needed for playing back the requested content object.
- the detection module 140 may obtain a content object identifier from the requested content object and searches for the predetermined child RO with reference to the content object identifier.
- Child ROs stored in the storage module 130 like the child RO illustrated in FIG. 7, comprise a content object identifier 730. Therefore, the detection module 140 examines the content object identifiers of the child ROs stored therein and searches for a child RO whose content object identifier is identical to the content object identifier obtained from the requested content object.
- the master device 100 sends a request for the predetermined child RO to a slave device 200.
- a message generation module 150 generates a child RO request message
- the device interface module 110 transmits the child RO request message to the slave device 200.
- the child RO request message may comprise a content object identifier.
- the device interface module 110 receives the predetermined child RO from the slave device 200, and then, a process of obtaining a parent RO is performed. However, if no child RO is received from the slave device 200 (for example, if the predetermined child RO is not received within a predetermined amount of time or if a message indicating that the predetermined child RO has not yet been detected from the slave device 200 is received), the method is terminated because the master device 100 cannot play back the requested content object.
- the detection module 140 searches the storage module 130 for a parent RO that has an inheritance relationship with the predetermined child RO. For this, the detection module 140 may obtain an inheritance relationship identifier from the predetermined child RO and searches the storage module 130 for a parent RO whose inheritance relationship identifier is identical to the obtained inheritance relationship identifier.
- the message generation module 150 generates a parent RO request message, and in operation S855, the device interface module 110 transmits the parent RO request message to the slave device 200.
- the parent RO request message may comprise an in- heritance relationship identifier.
- a playback module 160 plays back the requested content object using the predetermined child RO and the parent RO having an inheritance relationship with the predetermined child RO.
- the master device 100 may issue a request for a child RO and a request for a parent RO having an inheritance relationship with the child RO separately to the slave device 200.
- FIG. 11 is a flowchart illustrating the providing of ROs to a master device 100 by a slave device 200 according to an exemplary embodiment of the present invention.
- a device interface module 210 receives a request for a child RO from the master device 100.
- a detection module 240 searches a storage module 230 for a child RO requested by the master device 100.
- the detection module 240 may obtain a content object identifier from the child RO request message and searches the storage module 230 for a child RO whose content object identifier is identical to the obtained content object identifier.
- the device interface module 210 transmits the detected child RO to the master device 100.
- the device interface module 210 receives a parent RO request message from the mater device 100.
- the detection module 240 searches the storage module 230 for a parent RO requested by the master device 100.
- the detection module 24 may obtain an inheritance relationship identifier from the parent RO request message and searches the storage module 230 for a parent RO whose inheritance relationship identifier is identical to the obtained inheritance relationship identifier.
- the device interface module 210 transmits the detected parent RO to the master device 100 in operation S980.
- Operations S940 and S950 have been described above as being operations in which the slave device 200 actively transmits the requested child RO and the requested parent RO to the master device 100, but the present invention is not restricted to it.
- a control module 250 of the slave device 200 may allow the master device 100 to access the requested child RO and the requested parent RO.
- the method and the device for consuming a plurality of ROs having an inheritance structure in an environment where the ROs are distributed over a plurality of devices have the following aspects.
- RO needed for playing back the content object are stored in different devices, it is possible to play back the content object using an inheritance relationship between the parent RO and the child RO.
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- Accounting & Taxation (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Finance (AREA)
- Physics & Mathematics (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Computing Systems (AREA)
- Technology Law (AREA)
- Storage Device Security (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
Abstract
Description
Claims
Priority Applications (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
NZ555997A NZ555997A (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure |
CA002592872A CA2592872A1 (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure |
MX2007008542A MX2007008542A (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure. |
AU2006205318A AU2006205318B2 (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure |
EP06702899.3A EP1836597A4 (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure |
JP2007550309A JP4787270B2 (en) | 2005-01-13 | 2006-01-13 | Master device and method for consuming rights objects |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US64315005P | 2005-01-13 | 2005-01-13 | |
US60/643,150 | 2005-01-13 | ||
KR10-2005-0112553 | 2005-11-23 | ||
KR20050112553 | 2005-11-23 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2006075892A1 true WO2006075892A1 (en) | 2006-07-20 |
Family
ID=36677886
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/KR2006/000147 WO2006075892A1 (en) | 2005-01-13 | 2006-01-13 | Method and device for consuming rights objects having inheritance structure |
Country Status (8)
Country | Link |
---|---|
US (1) | US8180709B2 (en) |
EP (1) | EP1836597A4 (en) |
JP (1) | JP4787270B2 (en) |
AU (1) | AU2006205318B2 (en) |
CA (1) | CA2592872A1 (en) |
MX (1) | MX2007008542A (en) |
NZ (1) | NZ555997A (en) |
WO (1) | WO2006075892A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2009238212A (en) * | 2008-03-26 | 2009-10-15 | Pantech & Curitel Communications Inc | Entitled object generation method and its device, entitled object transmission method and its device, and entitled object receiving method and its device |
Families Citing this family (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR101346734B1 (en) * | 2006-05-12 | 2014-01-03 | 삼성전자주식회사 | Multi certificate revocation list support method and apparatus for digital rights management |
KR101443612B1 (en) | 2006-08-08 | 2014-09-23 | 엘지전자 주식회사 | Method and terminal for authenticating between drm agents for moving ro |
KR100765480B1 (en) * | 2006-10-23 | 2007-10-10 | 삼성전자주식회사 | Digital rights management file play system and method thereof for potable device |
US20080109656A1 (en) * | 2006-11-08 | 2008-05-08 | General Instrument Corporation | Method and Apparatus for Enabling Content to be Shared Among Multiple Devices in a Secure Environment |
KR100948384B1 (en) * | 2006-11-29 | 2010-03-22 | 삼성전자주식회사 | Method for moving rights object and device that is moving rights object and portable storage device |
DE102008025792A1 (en) * | 2008-05-29 | 2009-12-17 | T-Mobile International Ag | Personalization of a SIM using a unique, personalized MasterSIM |
EP2187282B1 (en) * | 2008-11-10 | 2012-02-01 | Siemens Aktiengesellschaft | Method of operating a system using data protected from unauthorised use |
US20100162410A1 (en) * | 2008-12-24 | 2010-06-24 | International Business Machines Corporation | Digital rights management (drm) content protection by proxy transparency control |
EP2211497A1 (en) | 2009-01-26 | 2010-07-28 | Gemalto SA | Secure communication establishment process, without sharing prior information |
US8682639B2 (en) * | 2010-09-21 | 2014-03-25 | Texas Instruments Incorporated | Dedicated memory window for emulation address |
US10831381B2 (en) | 2016-03-29 | 2020-11-10 | International Business Machines Corporation | Hierarchies of credential and access control sharing between DSN memories |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2002358241A (en) * | 2001-05-31 | 2002-12-13 | Victor Co Of Japan Ltd | Copy management method for content, recording/ reproducing unit and reproducing unit |
KR20030044892A (en) * | 2001-11-30 | 2003-06-09 | 마츠시타 덴끼 산교 가부시키가이샤 | Information converting device |
US6654754B1 (en) * | 1998-12-08 | 2003-11-25 | Inceptor, Inc. | System and method of dynamically generating an electronic document based upon data analysis |
JP2004220546A (en) * | 2002-11-20 | 2004-08-05 | Yoshinobu Inada | Management server of electronic utilization right, terminal device, management system and management method |
KR20050039523A (en) * | 2003-10-22 | 2005-04-29 | 삼성전자주식회사 | Method and apparatus for managing digital rights of portable storage device |
KR20060011760A (en) * | 2004-07-29 | 2006-02-03 | 엘지전자 주식회사 | Message for processing ro and ro processing method and system thehreby in drm system |
Family Cites Families (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6230247B1 (en) | 1997-10-29 | 2001-05-08 | International Business Machines Corporation | Method and apparatus for adaptive storage space allocation |
US6412070B1 (en) * | 1998-09-21 | 2002-06-25 | Microsoft Corporation | Extensible security system and method for controlling access to objects in a computing environment |
JP2002094500A (en) * | 2000-09-20 | 2002-03-29 | Sanyo Electric Co Ltd | Data terminal device |
US7418344B2 (en) | 2001-08-02 | 2008-08-26 | Sandisk Corporation | Removable computer with mass storage |
US20030126086A1 (en) | 2001-12-31 | 2003-07-03 | General Instrument Corporation | Methods and apparatus for digital rights management |
JP4118092B2 (en) * | 2002-06-19 | 2008-07-16 | 株式会社ルネサステクノロジ | Storage device and information processing device |
JP2004295271A (en) * | 2003-03-26 | 2004-10-21 | Renesas Technology Corp | Card and pass code generator |
JP4682498B2 (en) | 2003-04-09 | 2011-05-11 | ソニー株式会社 | Communication device and memory management method for communication device |
JP2004348286A (en) | 2003-05-20 | 2004-12-09 | Sony Corp | Information processor, informed processing method, and information processing system |
US8336105B2 (en) * | 2003-10-31 | 2012-12-18 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and devices for the control of the usage of content |
US7755786B2 (en) * | 2004-05-03 | 2010-07-13 | Microsoft Corporation | Systems and methods for support of various processing capabilities |
WO2006032942A1 (en) * | 2004-09-23 | 2006-03-30 | Nokia Corporation | Method and device for protecting digital content in mobile applications |
-
2006
- 2006-01-13 EP EP06702899.3A patent/EP1836597A4/en not_active Withdrawn
- 2006-01-13 US US11/331,091 patent/US8180709B2/en active Active
- 2006-01-13 JP JP2007550309A patent/JP4787270B2/en active Active
- 2006-01-13 CA CA002592872A patent/CA2592872A1/en not_active Abandoned
- 2006-01-13 MX MX2007008542A patent/MX2007008542A/en active IP Right Grant
- 2006-01-13 WO PCT/KR2006/000147 patent/WO2006075892A1/en active Application Filing
- 2006-01-13 AU AU2006205318A patent/AU2006205318B2/en active Active
- 2006-01-13 NZ NZ555997A patent/NZ555997A/en unknown
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6654754B1 (en) * | 1998-12-08 | 2003-11-25 | Inceptor, Inc. | System and method of dynamically generating an electronic document based upon data analysis |
JP2002358241A (en) * | 2001-05-31 | 2002-12-13 | Victor Co Of Japan Ltd | Copy management method for content, recording/ reproducing unit and reproducing unit |
KR20030044892A (en) * | 2001-11-30 | 2003-06-09 | 마츠시타 덴끼 산교 가부시키가이샤 | Information converting device |
JP2004220546A (en) * | 2002-11-20 | 2004-08-05 | Yoshinobu Inada | Management server of electronic utilization right, terminal device, management system and management method |
KR20050039523A (en) * | 2003-10-22 | 2005-04-29 | 삼성전자주식회사 | Method and apparatus for managing digital rights of portable storage device |
KR20060011760A (en) * | 2004-07-29 | 2006-02-03 | 엘지전자 주식회사 | Message for processing ro and ro processing method and system thehreby in drm system |
Non-Patent Citations (1)
Title |
---|
See also references of EP1836597A4 * |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2009238212A (en) * | 2008-03-26 | 2009-10-15 | Pantech & Curitel Communications Inc | Entitled object generation method and its device, entitled object transmission method and its device, and entitled object receiving method and its device |
US8327145B2 (en) | 2008-03-26 | 2012-12-04 | Pantech Co., Ltd. | Method for generating rights object and device to perform the method, method for transmitting rights object and device to perform the method, and method for receiving rights object and device to perform the method |
US8699706B2 (en) | 2008-03-26 | 2014-04-15 | Pantech Co., Ltd. | Method for generating rights object and device to perform the method, method for transmitting rights object and device to perform the method, and method for receiving rights object and device to perform the method |
Also Published As
Publication number | Publication date |
---|---|
AU2006205318B2 (en) | 2009-07-23 |
US20060155650A1 (en) | 2006-07-13 |
CA2592872A1 (en) | 2006-07-20 |
JP2008527533A (en) | 2008-07-24 |
EP1836597A4 (en) | 2013-07-10 |
EP1836597A1 (en) | 2007-09-26 |
NZ555997A (en) | 2010-06-25 |
JP4787270B2 (en) | 2011-10-05 |
MX2007008542A (en) | 2007-09-07 |
US8180709B2 (en) | 2012-05-15 |
AU2006205318A1 (en) | 2006-07-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
AU2006205318B2 (en) | Method and device for consuming rights objects having inheritance structure | |
US8181266B2 (en) | Method for moving a rights object between devices and a method and device for using a content object based on the moving method and device | |
JP4827836B2 (en) | Rights object information transmission method and apparatus between device and portable storage device | |
KR100736101B1 (en) | Method for consuming rights object having inherit structure in distributed device circumstance and device for the same | |
KR101254209B1 (en) | Apparatus and method for moving and copying right objects between device and portable storage device | |
CA2592889C (en) | Device and method for digital rights management | |
JP2007537532A (en) | Apparatus and method for converting digital rights object format between device and portable storage device for transmission / reception | |
JP2007538317A (en) | Content reproduction method and apparatus using digital copyright management between portable storage device and device, and portable storage device therefor | |
JP2007531149A (en) | Content reproduction method and apparatus using digital copyright management between portable storage device and device, and portable storage device for the same | |
US8245312B2 (en) | Method and apparatus for digital rights management | |
KR101241413B1 (en) | Apparatus and method for moving and copying right objects between device and portable storage device | |
KR20110084144A (en) | Method and apparatus for sending right object information between device and portable storage |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
WWE | Wipo information: entry into national phase |
Ref document number: 2006205318 Country of ref document: AU Ref document number: 555997 Country of ref document: NZ |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006702899 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2592872 Country of ref document: CA |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2007550309 Country of ref document: JP |
|
ENP | Entry into the national phase |
Ref document number: 2006205318 Country of ref document: AU Date of ref document: 20060113 Kind code of ref document: A |
|
WWE | Wipo information: entry into national phase |
Ref document number: 200680002180.0 Country of ref document: CN |
|
WWP | Wipo information: published in national office |
Ref document number: 2006205318 Country of ref document: AU |
|
WWE | Wipo information: entry into national phase |
Ref document number: MX/a/2007/008542 Country of ref document: MX |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 1187/MUMNP/2007 Country of ref document: IN |
|
WWP | Wipo information: published in national office |
Ref document number: 2006702899 Country of ref document: EP |